Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP0CO2_TEA8zdAM9P2nL3azaBuE.roa
File:                     JP0CO2_TEA8zdAM9P2nL3azaBuE.roa (raw, json)
Hash identifier:          pQMPdS2vEnBLgXy28MMPCEYlI1KTByRakez0u1p7boM=
Subject key identifier:   24:FD:02:3B:6F:D3:10:0F:33:74:03:3D:3F:69:CB:DD:AC:DA:06:E1
Certificate issuer:       /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial:       057E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP0CO2_TEA8zdAM9P2nL3azaBuE.roa
Signing time:             Wed 26 Feb 2025 09:07:10 +0000
ROA not before:           Wed 26 Feb 2025 09:07:10 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2516
IP address blocks:        14.8.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1406 (0x57e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
        Validity
            Not Before: Feb 26 09:07:10 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=24FD023B6FD3100F3374033D3F69CBDDACDA06E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:5d:8b:25:00:9e:40:2c:c8:4f:28:40:cf:1f:
                    b7:9c:48:da:90:7c:8b:4e:ce:15:e4:68:03:18:ee:
                    bc:1c:40:4a:b2:86:bc:0b:21:37:97:63:93:b3:7b:
                    28:61:b9:a7:6d:2c:dc:98:3b:91:fd:cd:80:ee:f6:
                    f5:f6:21:40:e5:4d:93:50:0b:b2:9a:eb:ad:19:61:
                    3d:7d:1d:41:41:ba:12:62:09:d7:6a:76:1f:bb:2a:
                    2a:21:e2:9f:17:4a:34:49:b3:5b:9f:21:45:76:d1:
                    8f:d8:5c:6d:2e:7e:09:cd:8e:9a:21:7c:c1:b5:c6:
                    5d:77:a4:7b:dc:91:eb:7d:4a:f2:f4:08:31:5a:dc:
                    d3:60:58:5e:0e:3e:c7:41:fc:53:b0:c0:fb:52:c0:
                    18:ad:81:77:99:16:a1:d1:09:26:41:c2:04:4a:2a:
                    6d:74:95:10:75:9b:d9:8c:41:35:95:56:b5:82:5d:
                    43:26:2d:0d:80:3c:60:c3:bd:19:dc:08:48:45:86:
                    e9:fa:91:0c:ab:f2:e3:be:a7:51:d1:ea:3a:a5:f7:
                    e4:92:a8:99:00:86:64:31:94:7b:43:a2:98:22:ef:
                    7a:de:27:da:53:98:8c:96:33:8b:29:dc:e5:f6:d0:
                    62:62:61:57:b1:d2:bb:58:92:43:5e:c9:f2:39:61:
                    0d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FD:02:3B:6F:D3:10:0F:33:74:03:3D:3F:69:CB:DD:AC:DA:06:E1
            X509v3 Authority Key Identifier:
                keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/JP0CO2_TEA8zdAM9P2nL3azaBuE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.8.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         13:57:c6:b7:f9:b2:ec:10:db:31:85:e4:ee:dc:cf:e5:f5:ef:
         99:a3:29:68:0c:53:8a:8f:59:fb:a5:c7:ca:d3:7d:3e:40:28:
         d6:64:95:85:fe:23:a1:3b:ad:5b:a0:b2:40:da:1a:28:17:fc:
         3a:11:25:6f:5b:67:4d:3c:24:49:37:c8:aa:7c:7d:d7:90:ab:
         1e:06:09:82:54:66:de:27:eb:76:6a:26:ea:a1:92:16:8e:7d:
         d3:ae:6a:0c:05:70:b2:fd:80:c8:5a:43:fd:d7:16:d8:f8:92:
         3a:04:32:f8:21:e5:ec:17:09:b8:45:fc:53:31:56:a8:06:15:
         59:20:f2:e0:ca:3d:f0:28:b3:66:74:9b:50:1f:20:a2:79:72:
         33:11:d1:de:75:c6:d4:68:6d:75:28:20:2c:3e:2b:02:22:79:
         c6:22:c3:87:b9:01:83:e8:b6:09:89:22:26:92:ad:f8:fc:4f:
         6b:55:76:e5:0f:a3:7d:42:2f:40:5f:70:03:1d:63:70:47:da:
         24:72:ff:62:b2:3a:81:49:9f:9f:1e:e2:cc:3e:2c:5e:0a:63:
         b8:87:fc:40:7f:c5:f9:d4:e4:56:89:aa:2c:90:9c:49:fe:95:
         70:8f:ef:54:31:9f:15:4a:7a:e0:20:e0:4b:bc:6c:e0:ee:05:
         10:ae:e1:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:38 2025 by rpki-client